« first day (1646 days earlier)
← previous day
next day →
last day (3298 days later) »
lkraav
5:27 AM
amazing. update-blocker works
3 hours later…
Rarst
8:42 AM
@lkraav had I been known to make things that don't?.. :)
lkraav
yes u php beginner u
1 hour later…
Unihedro
9:57 AM
Help flag this spam!
wordpress.stackexchange.com/q/184666/59485
2 hours later…
Rarst
11:57 AM
OH: "Are you contributing to WordPress?", someone: "No, we are a money making business."
Tweeted by
no_fear_inc
on
April 19, 2015 at 10:24 AM
3 hours later…
Sven
2:40 PM
Is there any way to escape a string if it may contain HTML, CSS and JS?
Rarst
escaping is purposeful and context sensitive. can't just
escape whatever
Sven
Yeah, the problem is, that the API returns the complete styled HTML form code (including JS and CSS) as one big string.
toscho
@Sven
strip_tags()
has a second parameter.
Rarst
strip_tags is meh and very basic, need to use real sanitizer if want to operate on html
Sven
Yea, but I cannot say what tags may be in the string. There is a drag and drop form builder on the other side; no idea what I will get back from there...
2 hours later…
lkraav
4:26 PM
wp_kses_post()?
Sven
@lkraav I don't think I can filter anything; the string actually contains things like
<script>
and
<style>
tags...
I've wrapped it all in a filter, so users can opt-out and use their own form instead.
It's like embedding an
iframe
; fast to implement but not helpful at all.
« first day (1646 days earlier)
← previous day
next day →
last day (3298 days later) »
all rooms
Transcript for
Apr
18
Apr '15
19
Apr
20
The Loop
Where humor doesn’t work.
2
join this room
about this room
00:00
06:00
12:00
18:00
all times are UTC
site design / logo © 2024 Stack Exchange Inc;
legal
mobile